This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # This workflow will build a golang project | |
| # For more information see: https://docs.github.com/en/actions/automating-builds-and-tests/building-and-testing-go | |
| # It is reusable workflow that can be called in other workflows | |
| name: AWS Infra Creation Using in TF Cloud | |
| on: | |
| workflow_call: | |
| secrets: | |
| TF_API_TOKEN: | |
| required: true | |
| push: | |
| branches: [ "main" ] | |
| pull_request: | |
| branches: [ "main" ] | |
| workflow_dispatch: | |
| env: | |
| tfcode_path: tfcloud_samples/amazon_ec2 | |
| jobs: | |
| aws_tfc_job: | |
| name: Create AWS Infra Using TFC | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout tf code in runner environment | |
| uses: actions/[email protected] | |
| # Configure Terraform cloud API token, since we are using Remote backend option of Terraform cloud in AWS code | |
| - name: Setup Terraform CLI | |
| uses: hashicorp/[email protected] | |
| with: | |
| cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }} | |
| # Add the AWS Creds as ENV variable in TF Cloud workspace, since the tf run happens in TF Cloud environment | |
| # Invoke the Terraform commands | |
| - name: Terraform init and validate | |
| run: | | |
| echo `pwd` | |
| echo "** Running Terraform Init**" | |
| terraform init | |
| echo "** Running Terraform Validate**" | |
| terraform validate | |
| working-directory: ${{ env.tfcode_path }} | |
| - name: Terraform Plan | |
| run: | | |
| echo "** Running Terraform Plan**" | |
| terraform plan -out=tfplan | |
| working-directory: ${{ env.tfcode_path }} | |
| - name: Show Terraform Plan | |
| run: | | |
| echo "** Showing Terraform Plan**" | |
| terraform show -json "tfplan" | jq > tfplan.json | |
| working-directory: ${{ env.tfcode_path }} | |
| - name: Upload Terraform Plan | |
| uses: actions/upload-artifact@v2 | |
| with: | |
| name: terraform-plan | |
| path: ${{ env.tfcode_path }}/tfplan | |
| # Once the user verifies the Terraform Plan, the user can run the Terraform Apply and Destroy commands | |
| apply_terraform_plan: | |
| needs: aws_tfc_job | |
| if: github.event_name == 'workflow_dispatch' | |
| runs-on: ubuntu-latest | |
| steps: | |
| - name: Checkout | |
| uses: actions/[email protected] | |
| - name: Setup Terraform CLI | |
| uses: hashicorp/[email protected] | |
| with: | |
| cli_config_credentials_token: ${{ secrets.TF_API_TOKEN }} | |
| - name: Download Terraform Plan | |
| uses: actions/download-artifact@v2 | |
| with: | |
| name: terraform-plan | |
| path: ${{ env.tfcode_path }} | |
| - name: Terraform Apply | |
| run: | | |
| echo "** Running Terraform Apply**" | |
| terraform apply -auto-approve tfplan | |
| working-directory: ${{ env.tfcode_path }} | |
| - name: Terraform Destroy | |
| run: | | |
| echo "** Running Terraform Destroy**" | |
| terraform destroy -auto-approve | |
| working-directory: ${{ env.tfcode_path }} |